Searching group 0: DDD+DD+++++++++++++++++D+DD+++++++++Searching group 1: +Searching group 2: +Searching group 3: +Searching group 4: +Searching group 5: +Searching group 6: +Searching group 7:Writing analysis so far to ’sdb1.ext3grep.stage1′. Delete that file if you want to do this stage again.Result of stage one:8 inodes are referenced by one or more directory blocks, 4 of those inodes are still allocated.7 inodes are referenced by more than one directory block, 3 of those inodes are still allocated.0 blocks contain an extended directory.Result of stage two:4 of those inodes could be resolved because they are still allocated.4 inodes could be resolved because all refering blocks but one were journal blocks.All directory inodes are accounted for!

Writing analysis so far to ’sdb1.ext3grep.stage2′. Delete that file if you want to do this stage again.dir1dir1/.dir1.txt.swpdir1/dir1.txtdir2dir2/.dir2.txt.swpdir2/dir2.txtdir3dir3/.dir3.txt.swpdir3/dir3.txtlost+foundtest1.txttest2.txt디렉토리1디렉토리1/.디렉토리1.txt.swp디렉토리1/디렉토리1.txt디렉토리2디렉토리2/.디렉토리2.txt.swp디렉토리2/디렉토리2.txt디렉토리3디렉토리3/.디렉토리3.txt.swp디렉토리3/디렉토리3.txt테스트.txt테스트2.txt

Searching group 0: DDD+DD+++++++++++++++++D+DD+++++++++Searching group 1: +Searching group 2: +Searching group 3: +Searching group 4: +Searching group 5: +Searching group 6: +Searching group 7:Writing analysis so far to ’sdb1.ext3grep.stage1′. Delete that file if you want to do this stage again.Result of stage one:8 inodes are referenced by one or more directory blocks, 4 of those inodes are still allocated.7 inodes are referenced by more than one directory block, 3 of those inodes are still allocated.0 blocks contain an extended directory.Result of stage two:4 of those inodes could be resolved because they are still allocated.4 inodes could be resolved because all refering blocks but one were journal blocks.All directory inodes are accounted for!

# ext3grep –restore-all –after=1235694514 /dev/sdb1Running ext3grep version 0.10.1Only show/process deleted entries if they are deleted on or after Fri Feb 27 09:28:34 2009.

Number of groups: 8Minimum / maximum journal block: 562 / 4664Loading journal descriptors… sorting… doneThe oldest inode block that is still in the journal, appears to be from 1235694214 = Fri Feb 27 09:23:34 2009Number of descriptors in journal: 269; min / max sequence numbers: 2 / 40Loading sdb1.ext3grep.stage2… doneNot undeleting “dir1/.dir1.txt.swp” because it was deleted before 1235694514 (32767)Restoring dir1/dir1.txtNot undeleting “dir2/.dir2.txt.swp” because it was deleted before 1235694514 (1235694303)Not undeleting “dir2/dir2.txt” because it was deleted before 1235694514 (1235694303)Not undeleting “dir3/.dir3.txt.swp” because it was deleted before 1235694514 (1235694303)Not undeleting “dir3/dir3.txt” because it was deleted before 1235694514 (1235694303)Restoring test1.txtNot undeleting “test2.txt” because it was deleted before 1235694514 (1235694287)Not undeleting “디렉토리1/.디렉토리1.txt.swp” because it was deleted before 1235694514 (1235694287)Not undeleting “디렉토리1/디렉토리1.txt” because it was deleted before 1235694514 (1235694287)Not undeleting “디렉토리2/.디렉토리2.txt.swp” because it was deleted before 1235694514 (1235694287)Restoring 디렉토리2/디렉토리2.txtNot undeleting “디렉토리3/.디렉토리3.txt.swp” because it was deleted before 1235694514 (1235694404)Not undeleting “디렉토리3/디렉토리3.txt” because it was deleted before 1235694514 (1235694404)Not undeleting “테스트.txt” because it was deleted before 1235694514 (1235694404)Restoring 테스트2.txt